
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
@idosgames/module-sdk
Advanced tools
The composable-module contract for the iDosGames host shell: Module / ModuleContext types plus tiny authoring helpers. Framework-neutral at runtime — a module can be a game (Three/Phaser), a plain app, or an AI app.
The composable-module contract for the iDosGames host shell. A module is a self-contained
feature — a game (Three/Phaser), a plain app, or an AI app — that plugs into the host: it declares a
Module manifest and, in setup(ctx), registers what it contributes (a rendered EngineScene,
React UiPanels, a nav route). Framework-neutral at runtime — React and @idosgames/core are
referenced as types only, so a renderer-less module pulls in neither.
import { defineModule } from "@idosgames/module-sdk";
export const myModule = defineModule({
id: "my-game",
meta: { name: "My Game", type: "game", genre: "arcade", engine: "three" },
setup(ctx) {
ctx.registerScene(scene); // mount/activate/suspend/destroy
ctx.registerPanel(panel); // React UI in a host slot
ctx.registerRoute({ id: "my-game", label: "Play", icon: "🎮" });
},
});
Key types: Module, ModuleContext, EngineScene, SceneMountContext, UiPanel, SurfaceAllocator,
RouteEntry, SharedEventBus. The host runtime is @idosgames/app-shell;
shared React glue is @idosgames/react.
See the full design in docs/composable-modules-architecture.md, or load the idosgames-module-contract
skill (via the @idosgames/mcp server).
FAQs
The composable-module contract for the iDosGames host shell: Module / ModuleContext types plus tiny authoring helpers. Framework-neutral at runtime — a module can be a game (Three/Phaser), a plain app, or an AI app.
The npm package @idosgames/module-sdk receives a total of 147 weekly downloads. As such, @idosgames/module-sdk popularity was classified as not popular.
We found that @idosgames/module-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.